ensure proper read ownerships for the aclpolicy.
ensure correct file perms for acl policy
add example of node metdata as env vars.